>> ARCHIVE: 2020-03

rConfig version 3.9 suffers from a remote SQL injection vulnerability.

rConfig version 3.93 suffers from an authenticated ajaxAddTemplate.php remote code execution vulnerability.

ASUS AAHM version 1.00.22 suffers from an asHmComSvc unquoted service path vulnerability.

HRSALE version 1.1.8 suffers from a cross site request forgery vulnerability.

WordPress Appointment Booking Calendar plugin version 1.3.34 suffers from a CSV injection vulnerability.

AtMail WebMail versions 4.61 and below suffer from an open redirection vulnerability.

WatchGuard Fireware AD Helper component version 5.8.5.10317 suffers from a credential disclosure vulnerability.

Horde Groupware Webmail Edition version 5.2.22 suffers from a PHAR loading vulnerability.

Horde Groupware Webmail Edition version 5.2.22 suffers from a PHP file inclusion vulnerability.

Chrome suffers from a site isolation bypass in BlobURLStoreImpl::Register.